DeFi Protocol UwU Lend Drained by Flash Loan Oracle Manipulation
The protocol's oracle design, which lacked price smoothing and relied on manipulable low-liquidity pools, enabled a $4 billion flash loan attack.
Yearn Legacy Pool Drained Exploiting Stale Storage Value Arithmetic Flaw
A critical logic flaw in gas-saving state caching allowed an attacker to mint infinite tokens, demonstrating the systemic risk of legacy contract arithmetic.
DeFi Protocol Prisma Finance Drained via Malicious Flash Loan Input Validation Flaw
Inadequate input validation on the flash loan callback allowed an attacker to spoof migration data, directly compromising approved user collateral.
Symbiotic Launches Permissionless Modular Restaking Unlocking Any ERC-20 for Security
The protocol's permissionless ERC-20 collateral and customizable slashing vaults establish a neutral, foundational security marketplace for all decentralized services.
Abracadabra Protocol Drained $1.8 Million Exploiting Deprecated Contract Logic Flaw
A multi-action smart contract logic error in a deprecated lending pool allowed an attacker to repeatedly bypass the solvency check, draining $1.8M in MIM.
